Privacy policy

1. Introduction
Royal Pop Style is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Belgian data protection law.

2. Data Controller
Brahim Korkdan — Royal Pop Style
53 Rue de Schoppach, 6700 Arlon, Belgium
BCE: 0869.820.081 — VAT: BE0869.820.081
Email: contact@royalpopstyle.com
Phone: +33 7 56 99 67 13

3. Personal Data We Collect
- Identity data: first name, last name
- Contact data: email address, phone number
- Delivery data: shipping and billing address
- Transaction data: order details, products purchased, payment method type (we do not store card numbers)
- Technical data: IP address, browser type, device type, pages visited (via cookies and analytics)
- Marketing data: communication preferences (only if you opt in)

4. Purpose and Legal Basis
- Processing and fulfilling your order — Art. 6(1)(b) Contract performance
- Customer support — Art. 6(1)(b) Contract performance
- Accounting and tax compliance — Art. 6(1)(c) Legal obligation
- Fraud prevention — Art. 6(1)(f) Legitimate interest
- Website analytics — Art. 6(1)(f) Legitimate interest
- Marketing emails — Art. 6(1)(a) Consent (withdrawable at any time)

5. Data Sharing
We share data only with: Shopify Inc. (e-commerce platform), payment processors (Shopify Payments), shipping carriers, Google Analytics (anonymised). We never sell, rent, or trade your data.

6. Data Retention
- Order data: 7 years (Belgian tax law)
- Marketing data: until unsubscribe + 3 years
- Analytics data: 13 months
- Cookie consent: 12 months

7. Cookies
- Strictly necessary: required for cart and checkout. Cannot be disabled.
- Analytics: Google Analytics — only with your consent.
- Marketing: only with your consent.

8. Your Rights (GDPR)
You have the right to: access, rectify, erase, restrict, object to processing, and data portability.
To exercise these rights: contact@royalpopstyle.com — we respond within 30 days.

9. Right to Lodge a Complaint
Belgian Data Protection Authority:
www.autoriteprotectiondonnees.be
Rue de la Presse 35, 1000 Brussels — +32 (0)2 274 48 00

10. Third-Party Processors
- Shopify Inc. (Canada) — e-commerce platform
- Google LLC (USA) — Analytics (GA4), consent-based only
All processors operate under GDPR-compliant data processing agreements and Standard Contractual Clauses (SCCs).

11. Changes
The current version is always available at royalpopstyle.com/pages/privacy-policy